Chat now with support
Chat with Support

NetVault 12.3 - Administration Guide

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices Backing up data Managing policies Restoring data Managing NetVault Backup dashboard Managing jobs Monitoring logs Managing storage devices
Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts
About user accounts About user and group privileges and presets Creating a user account Modifying a user account Deleting a user account Setting a user policy Using Secure Mode Using Presets User privileges Predefined Presets Integrating Active Directory with NetVault Backup Using Azure Active Directory as an identity provider
Monitoring events and configuring notifications Reporting in NetVault Backup Working with client clusters Configuring default settings for NetVault Backup
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring default settings for global notification methods Configuring the reporting utility Configuring NetVault Backup WebUI default settings Configuring NetVault Backup to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault Backup processes Environment variables Network ports used by NetVault Backup Troubleshooting
Common errors
NetVault Backup Service fails to start on Windows NetVault Backup Service fails to start after the machine is restarted NetVault Backup Service starts, but stops immediately on Linux Login fails after any change in the server IP address Unexpected behavior of NetVault Backup WebUI WebUI does not run in Compatibility View in Internet Explorer NetVault Backup installer fails during push installation VSS-based backup fails Modifying TCP/IP socket buffer size on Windows Restores using Data Copy savesets fail on clients running NetVault Backup 10.0.1 Restore fails on Itanium platforms if the index is larger than 2GB After upgrade, Data Copy and Consolidated backup job on Linux fails After upgrade, console error is displayed on WebUI pages Deployment task hangs on target Linux machine during push installation. Unable to add package store with hostname. Deployment task fails due to network configuration issues. Domain user is unable to login NetVault Backup Server if the workstation attribute is set. Domain user is unable to login NetVault Backup Server on Debian 9. Adding the target machine as a client fails, after successful push installation. Unable to install, uninstall or navigate catalog search page after manually uninstalling NetVault Backup Client Host. Unable to install, uninstall catalog search on client after NetVault Backup Server migration with the same or different server name External Azure AD user cannot add an external Azure AD user to NetVault Backup Server Failed to verify target Windows machine from a Linux-based NetVault Backup server
Safe Mode in NetVault Backup

Restricting an application to a set of users

Microsoft Azure Active Directory (Azure AD) lets you restrict access to applications to specific sets of users or security groups. To view the procedure for enabling the app to enable user assignments, search the Microsoft Azure Active Directory documentation. If the user assignment requirement is set to Yes, then you must assign the Azure AD users to the application in the Azure portal before they can log in to NetVault.

To assign a user to NetVault Backup in the Azure portal:
1
Navigate to Enterprise applications.
2
Select NetVault as the application that you registered.
3
Under Users and groups, click Add user.
4
Select the appropriate user.
5
Click Assign.

Configuring Azure AD in NetVault Backup

To configure Azure AD in NetVault Backup:
1
Log in to the NetVault server as an administrator.
2
From the NetVault WebUI, and in the Navigation pane, click Change Settings.
3
On the NetVault Server Settings page, under User management, click Identity Provider.
4
In the Identity Provider window, enter the Application ID and Directory ID.
 
* 
NOTE: To retrieve the Directory ID for the application, see Azure AD Properties.
5
Click Apply.

Managing an Azure AD user

The following list identifies what various users can and cannot do within NetVault Backup as it pertains to Azure Active Directory (Azure AD):

•
When an Azure AD user logs in using Sign In with Azure AD, NetVault Backup authenticates the login against Azure Active Directory. This behavior lets an Azure AD user log in to NetVault Backup without needing a local NetVault Backup account.
•
If authentication succeeds and this is the first time that the user is logging in, NetVault Backup takes one of the following actions:
•
If a corresponding Azure AD group exists in NetVault Backup, then NetVault Backup adds the user and assigns the user the privileges, access levels, and notification settings that are defined for the corresponding Azure AD group.
•
If the user does not have a NetVault Backup account, NetVault Backup adds the user but excludes all privileges, access levels, and notification settings. When the local NetVault Backup administrator logs in, the administrator can view the Azure AD user entry and assign the applicable privileges.
•
NetVault Backup automatically fetches the respective user details from the domain controller and stores them locally in the NetVault Backup database. When in secure mode, NetVault Backup fetches the details from the domain controller and overwrites them in the NetVault Backup database on every successful login.
•
If authentication fails, NetVault Backup displays an error message and prevents the user from logging in.
•
All NetVault Backup administrators can view all local, AD, and Azure AD NetVault Backup users.
•
An Azure AD NetVault Backup user with administrative privileges can add authenticated Azure AD users; a local NetVault Backup administrator cannot.
•
An Azure AD NetVault Backup user with administrative privileges can rename an existing local NetVault Backup user to an authenticated Azure AD NetVault Backup user; a local NetVault Backup administrator cannot.
 
* 
NOTE: To maintain the integrity of the user’s Azure AD password, ensure that the password field remains empty.
•
After you add the Azure AD user in NetVault Backup, you cannot rename the user to any other user name.
•
No one can change the password of an Azure AD user or set the password to use the Password never expires option.
•
A local, AD, or Azure AD NetVault Backup user with administrative privileges can change user-based information that is accessed by using the Modify Details option as this information is stored in the NetVault Database. However, if the secure mode is enabled, the NetVault Backup administrator and other users are allowed to edit or change only E-mail 2 and E-mail 3 of an Azure AD NetVault Backup user.

The following procedures detail ways of managing a Microsoft Azure Active Directory (Azure AD) user account.

•
Adding an Azure AD user
•
Deleting an AD user

Adding an Azure AD user

As with Active Directory (AD), the preferred method of adding an Azure AD user is for the applicable user to log in and let NetVault Backup complete the authentication process. However, if you have the applicable privileges, at a minimum, you must have the Users — Administer user accounts privilege, you can manually add the user, where it will also consider the privileges defined to the selected user before renaming it to an Azure AD user.

When you add an Azure AD user to the NetVault Backup Server, NetVault Backup automatically fetches the respective user information from Azure AD and populates it in the NetVault Backup user details. When you add users manually, NetVault Backup automatically assigns the user the privileges that are defined for the Azure AD group to which the user belongs.

To add an Azure AD user account to NetVault Backup:
1
In the Navigation pane, click Users and Groups.
2
On the Manage User Accounts and User Groups page, click Add User.
3
Select the user on Manage User Accounts and User Groups page and click Modify Details.
4
Enter the Azure AD user name; for example, username@domain.com.
5
Click Apply.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating